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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely fijed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)^ Responsive to communication(s) filed on 22 October 2007 , 
2a)D This action is FINAL. 2b)E3 This action is non-final. 

3) Q Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) E3 Claim(s) 1-7.22-28,41-52 and 63-71 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) [X] Claimfs) 1-7, 22-28 A1 -52 and 63-71 is/are rejected. 

7) Q Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

£))□ The specification is objected to by the Examiner. 

10)Q The drawing(s) filed on is/are: a)Q accepted or b)Q objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
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2.0 Certified copies of the priority documents have been received in Application No. . 
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application from the International Bureau- (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1. A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 . 1 7(e), was filed in this application after final rejection. Since this application is eligible 
for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1 . 1 7(e) has 
been timely paid, the finality of the previous Office action has been withdrawn pursuant to 37 
CFR 1.114. Applicant's submission filed on 10/22/07 has been entered. New claims 66-71 have 
been added. Claims 1-7, 22-28, 41-52 and 63-71 are pending. 

Response to Arguments 

2. Applicant's arguments filed 10/22/07 have been fully considered but they are not 
persuasive. Applicant argued that the art on record (specifically Drew, US 6,928,555) fails to 
teach storage device detecting write operations to tracks of the storage device, and providing 
any information regarding the tracks from the storage device to an anti-virus unit. Applicant 
further argued that, Drew is silent regarding any mention of a 'track' of a storage device. 
Examiner disagrees. 

It is understood by the examiner that 'tracks of a storage device' correspond to 'memory 
locations of the storage device where a file has been stored'. Examiner would point out that, 
'scanning a file , implies scanning tracks of a storage device, because when a file is scanned, the 
memory location where the file is stored (i.e., tracks of the storage device) is also scanned. 
Furthermore, present specification page 15, liens 19-22, indicates "...Thus, the storage device 
may detect write operations to tracks of the device. Any files that are stored on the tracks 
that are written to since a previous virus scan may be deemed suspect and thus may be 
scanned for viruses/ It is therefore understood by the examiner in view of the specification 
that, 'scanning tracks of a storage device to which write operation have been detected' is 
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equivalent to Scanning a file stored on a storage device to which write operation has been 
detected'. 

Examiner would further point out that, Drew teaches a virus scanning method, including 
detecting, by a storage device write operations to tracks of the storage device (i.e., opening 
and/or closing a file for write access & determining if the file was actually written) [column 3, 
lines 40-55 and column 4, lines 5-25], providing to an antivirus unit by the storage device, 
information indicating which tracks of the storage device have been accessed for a write 
operation (i.e., providing a flag indicating whether a file was actually written or not) [column 3, 
lines 40-55 and column 4, lines 5-25]; and scanning portions on those tracks to which a write 
operations have been directed (i.e., as indicated above scanning a file for a virus corresponds to 
scanning portions on the tracks of the storage device) in accordance with information provided 
by the storage device [column 3, lines 40-55 and column 4, lines 5-25]. Examiner would further 
point out that the combination of Waldin and Drew teaches the claim limitations and therefore, 
the rejection is respectfully maintained. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
' Patentability shall not be negatived by the manner in which the invention was made. 
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4. Claims 1-7, 22-28, 41-52, 63-66 and 71 are rejected under 35 U.S.C. 103(a) as being . 
unpatentable over Waldin et al. US Patent 6,094,731 (hereinafter Waldin) in view of Drew US 
6,928,555 B1. 

5. As per claim 1,41, 63, 65, 66 and 71 , Waldin teaches a method of scanning a storage 
device for viruses, comprising: 

determining physical portions of the storage device that have been modified since a 
previous virus scan using information about the physical portions without using information 
about a file structure, a file system, or a file type [column 2, lines 57-64 column 6, lines 37-47 
and column 3, lines 5-45]; and 

scanning at least parts of the physical portions for viruses, wherein scanning performed 
without using information about a file structure, a file system or a file type [column 6, lines 43-46 
, column 7, lines 37-46, column 7, line 64 - column 8, line 8 and column 3, lines 5-45]. 

Waldin is silent on detecting by the storage device write operations to tracks of the . 
storage device, and providing to an antivirus unit by the storage device, information indicating 
which tacks of the storage device have been accessed for a write operation and scanning those 
tracks. However, it is old and well known in the art to detect a write operation to tracks of a 
storage device and scan the tracks of the storage device by an antivirus unit, which has an 
advantage of enhancing the security of the system by performing virus scanning of the device 
on every access of the tracks of the storage device. For example, Drew teaches a virus 
scanning method, including detecting, by a storage 'device write operations to tracks of the 
storage device [column 3, lines 40-55 and column 4, lines 5-25]; providing to an antivirus unit by 
the storage device, information indicating which tracks of the storage device have been 
accessed for a write operation [column 3, lines 40-55 and column 4, lines 5-25]; and scanning 
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portions on those tracks to which a write operations have been directed (i.e., scanning a file for 
a virus corresponds to scanning portions on the tracks of the storage device) in accordance with 
information provided by the storage device [column 3, lines 40-55 and column 4, lines 5-25]. It 
would have been obvious to one having ordinary skill in the art at the time of applicant's 
invention to employ the teachings of Drew within the system of Waldin in order to further 
enhance the security of the system. 

6. As per claims 2 and 42, Waldin further teaches the method, wherein the physical 
portions correspond to tracks (sectors) of the storage device [column 4, lines 4-8 and figure 1]. 

;L\ 7. As per claims 3 and 43, Waldin fruther teaches the method, wherein the physical 

portions correspond to sectors of the storage device [column 4, lines 4-8 and figure 1]. 

8. As per claims 4 and 44, Waldin further teaches the method, wherein the physical 
portions correspond to sub-portions of the storage device [column 4, lines 4-8 and figure 1]. 

9. As per claims 5 and 45, Waldin further teaches creating a table that is indexed according 
to each of the portions [fig 1, unit 10 and column 4, lines 4-8]. Waldin also teaches scanning for 
viruses when it has been determined that portions have been modified [column 4, lines 9-12], 
and calculating a new hash value upon determination of a modification [column 4, lines 58-60]. 
Drew, further teaches scanning portions of a storage device to which a write operations have 

1' 

been directed (i.e., scanning a file for a virus corresponds to scanning portions on the tracks of 
the storage device) in accordance with information provided by the storage device [column 3, 
lines 40-55 and column 4, lines 5-25]. 
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10. As per claims 6 and 7, Waldin further teaches method, wherein creating the table 
includes copying another table provided by the storage device [column 3, lines 50-55, figure 1, 
originating and recipient computers]. 

11. As per claims 46, 51 and 52 Waldin further teaches the method, wherein said means for 
coupling includes means for coupling to only one storage device [column 3, lines 47-55]. 

12. As per claims 47-50, Waldin further teaches the method, wherein said means for 
coupling includes means for coupling to more than one storage device [column 8, lines 20-30]. 

1 3. As per claims 22-28 and 64, the claimed steps correspond to the functions of the 
elements of the method claims 1-7, which has been rejected above and thus rejected with the 
same reason applied thereto. 

14. Claims 67-70 are rejected under 35 U.S.C. 103(a) as being unpatentable over Waldin et 
al. US Patent 6,094,731 (hereinafter Waldin) in view of Drew US 6,928,555 B1 and further in 
view of Ruff et al. US 6,802,028 (hereinafter Ruff). 

15. As per claims 67-70, Waldin and Drew teach scanning a storage device for viruses as 
indicated above. Furthermore, Ruff teaches an antivirus unit included in a disk controller of a 
storage device, wherein the disk controller is a first disk controller of a plurality of disk 
controllers included in the storage device, the antivirus unit is a first antivirus unit of a plurality of 
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antivirus units included in the storage device and each of said plurality of disk controllers 
includes a different one of said plurality of antivirus units [column 7, line 53 - column 8, line 34]. 
It could have been obvious to one having ordinary skill in the art at the time of applicant's 
invention to employ the teachings of Ruff within the combination of Waldin and Drew to achieve 
* a predictable result of including an antivirus unit in a disk controller. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Beemnet W. Dada whose telephone number is (571) 272-3847. The 
examiner can normally be reached on Monday - Friday (9:00 am - 5:30 pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



